Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/TLCOp8VQQYT-sDLZMkb_dNE0wJI.roa
File: TLCOp8VQQYT-sDLZMkb_dNE0wJI.roa (raw, json)
Hash identifier: 8TF1RbnrjzrAYcRglOW5PIK7TmKRhUoFu7HvQr3ZHoA=
Subject key identifier: 4C:B0:8E:A7:C5:50:41:84:FE:B0:32:D9:32:46:FF:74:D1:34:C0:92
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 0194D5B96D647B9DDB89B1CFB55343B6E07B
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/TLCOp8VQQYT-sDLZMkb_dNE0wJI.roa
Signing time: Wed 05 Feb 2025 10:48:06 +0000
ROA not before: Wed 05 Feb 2025 10:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60117
IP address blocks: 45.95.42.0/24 maxlen: 24
45.95.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:b9:6d:64:7b:9d:db:89:b1:cf:b5:53:43:b6:e0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Feb 5 10:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cb08ea7c5504184feb032d93246ff74d134c092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:2e:96:81:43:70:c6:5a:7c:c1:7e:44:cc:
42:92:40:83:a3:65:74:53:d1:9c:d5:5b:00:23:af:
02:43:f1:1e:eb:b6:aa:76:f6:cc:58:28:3a:58:23:
06:bc:d7:7e:a0:89:40:02:cb:55:bb:5e:44:ff:71:
b5:32:d9:78:77:74:c4:c5:d2:9e:8a:c6:f5:2a:7d:
42:cf:c2:39:55:2c:b4:da:b3:4d:3f:38:a0:c8:cb:
fc:37:53:c7:bf:28:66:38:c3:9d:33:34:dc:e1:58:
77:4e:25:2b:ac:ae:7c:ea:b7:5e:f2:25:5c:4a:b1:
79:af:cd:3a:dc:bc:56:d4:17:15:48:d0:fb:3b:c6:
a5:29:f1:eb:6e:c6:8b:b9:c6:95:b5:a6:a1:4d:8e:
52:8c:cb:38:b3:54:12:1b:2d:9c:49:67:81:a5:8a:
22:77:70:31:3b:bd:c3:1f:15:a0:a2:71:16:8b:79:
18:82:7d:33:16:ba:58:23:a8:d1:bd:72:4c:a9:7e:
4e:8e:54:c6:dc:77:ff:64:09:46:db:4d:61:ce:98:
12:dd:d3:eb:e1:65:8e:05:74:29:bb:c6:24:77:e0:
86:4d:5e:24:ba:79:d2:82:d1:de:ba:d3:fe:02:2f:
68:1d:0a:c2:d6:29:da:d7:34:b6:25:20:c3:1f:bf:
59:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B0:8E:A7:C5:50:41:84:FE:B0:32:D9:32:46:FF:74:D1:34:C0:92
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/TLCOp8VQQYT-sDLZMkb_dNE0wJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.42.0/23
Signature Algorithm: sha256WithRSAEncryption
28:ed:ff:09:1a:dc:39:7b:0a:14:17:52:83:2f:09:8c:d4:df:
45:f2:ee:a7:e2:2a:cd:6e:64:12:da:95:0d:63:b5:d9:37:a2:
de:62:7c:f0:04:0b:10:14:a3:1b:d5:2a:57:70:c7:fa:af:c4:
90:81:e6:4d:cb:52:f6:a3:3e:46:18:28:67:6e:f4:bc:32:0d:
3c:94:dc:eb:87:cf:58:ac:86:8c:4c:9b:33:c4:b3:7c:6d:a2:
a0:44:5c:b4:35:0f:95:ec:e9:1b:10:a1:24:1f:28:e4:c3:02:
ab:e1:59:08:aa:0d:ab:d6:f5:e4:22:3c:7d:96:18:44:ef:37:
c3:b9:18:29:1d:dd:68:42:7c:ad:0f:cb:a0:4d:d1:d1:57:ed:
a1:81:93:6f:2d:45:5f:70:2a:3e:51:96:78:2d:3f:97:f1:33:
5f:48:72:53:41:db:1b:cb:2f:ef:3f:bf:f4:ad:01:da:ab:3f:
67:ef:ed:c6:f5:e5:5e:f9:73:be:27:0b:ae:4f:9f:7c:10:96:
9c:d4:64:a9:e0:93:b5:27:d6:46:5d:67:8a:10:b7:97:41:f3:
10:87:22:7d:d0:82:74:1e:05:f5:2f:c9:cd:31:3f:8f:db:18:
72:f6:7f:d5:9b:44:99:ab:17:d9:89:50:b5:57:58:b6:83:b1:
17:b4:43:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:01:09 2025 by rpki-client